20日 火曜日、先勝

+ RHSA-2014:0513 Moderate: libxml2 security update
https://rhn.redhat.com/errata/RHSA-2014-0513.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2877
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0191

+ UPDATE: HPSBMU03022 rev.3 - HP Systems Insight Manager (SIM) Bundled Software running OpenSSL, Remote Disclosure of Information
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04263236-3%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ UPDATE: HPSBST03000 rev.2 - HP StoreEver ESL G3 Tape Library and Enterprise Library LTO-6 Tape Drives running OpenSSL, Remote Disclosure of Information
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ SA58569 Linux Kernel BPF Two Denial of Service Vulnerabilities
http://secunia.com/advisories/58569/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3144
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3145

+ Linux Kernel Multiple Function Remote Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/66279
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2523

アシスト、標的型攻撃の検知でログ分析システムの構築サービス
http://itpro.nikkeibp.co.jp/article/NEWS/20140519/557765/?ST=security

JVNVU#96603356 Juniper ScreenOS におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU96603356/

REMOTE: AoA MP4 Converter 4.1.2 - ActiveX Exploit
http://www.exploit-db.com/exploits/33433

REMOTE: AoA Audio Extractor Basic 2.3.7 - ActiveX Exploit
http://www.exploit-db.com/exploits/33431

REMOTE: AoA DVD Creator 2.6.2 - ActiveX Exploit
http://www.exploit-db.com/exploits/33432

LOCAL: CyberLink Power2Go Essential 9.0.1002.0 - Registry SEH/Unicode Buffer Overflow
http://www.exploit-db.com/exploits/33426